Lucene search
+L

702948 matches found

Cvelist
Cvelist
•added 2026/10/15 6:12 p.m.•29 views

CVE-2026-110360 WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5...

5.3CVSS0.00228EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 6:12 p.m.•6 views

EUVD-2026-102243

Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Search Lite: from n/a through 4.14.5...

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 6:12 p.m.•11 views

CVE-2026-110360

The WPdreams Ajax Search Lite plugin (versions

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/15 6:12 p.m.•19 views

CVE-2026-21533_Scanner.py

CVE-2026-21533 Scanner: Windows RDP Local Privilege Escalation Detection Tool This repository contains a detection tool for the CVE-2026-21533 vulnerability, a privilege management flaw in Windows Remote Desktop Services RDS that could allow a local attacker to elevate their privileges to SYSTEM...

7.8CVSS7.9AI score0.04148EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/10/15 6:12 p.m.•13 views

CVE-2026-31431

CVE-2026-31431 POC for CVE-2026-31431 Script The script is a small 10-lines POC that allows any user to become root on a machine...

7.8CVSS6.7AI score0.03437EPSS
SaveExploits248
Patchstack
Patchstack
•added 2026/10/15 6:12 p.m.•13 views

WordPress Ajax Search Lite plugin <= 4.14.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Alex J. in WordPress Plugin Ajax Search Lite versions = 4.14.5...

5.3CVSS5.8AI score0.00228EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
•added 2026/10/15 6:11 p.m.•30 views

CVE-2026-109897 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

5.4CVSS0.00209EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 6:11 p.m.•12 views

CVE-2026-109897

The Strong Testimonials WordPress plugin (versions

5.4CVSS5.9AI score0.00209EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/15 6:11 p.m.•11 views

CVE-2026-109897 WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

5.4CVSS5.9AI score0.00209EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/15 6:11 p.m.•6 views

EUVD-2026-102242

Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Strong Testimonials: from n/a through 3.3.12...

5.4CVSS5.9AI score0.00209EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/15 6:11 p.m.•6 views

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by GOOKBOB in WordPress Plugin Strong Testimonials versions = 3.3.12...

5.4CVSS5.8AI score0.00209EPSS
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/15 6:10 p.m.•25 views

CVE-2025-46818

CVE-2025-46818 – Redis Lua Sandbox Cross-User Escape Sandbox escape via deprecated Lua APIs and mutable metatables on Redis 8.2.1. Overview Redis 8.2.1 keeps deprecated Lua builtins getfenv, setfenv, newproxy exposed to scripts and fails to lock metatables for basic types. An attacker can inject...

7.3CVSS7.1AI score0.00727EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/15 6:10 p.m.•13 views

CVE-2021-4034-Linux

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

7.8CVSS7.4AI score0.94921EPSS
SaveExploits157
Kitploit
Kitploit
•added 2026/10/15 6:10 p.m.•16 views

CVE-2026-6355

Augmentt: Cross-Tenant Access via IDOR Credits This CVE was a collaborative effort between: Raznov – GitHub: https://github.com/basraznov HelloWorld Author– GitHub: https://github.com/Penquinsecq Description A vulnerability in the web application allows unauthorized users to access and manipulate...

6.5CVSS6.1AI score0.00293EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/10/15 6:10 p.m.•9 views

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

9.3CVSS8AI score0.55498EPSS
SaveExploits73References1
Kitploit
Kitploit
•added 2026/10/15 6:09 p.m.•17 views

CVE-2026-25746_SqlInjectionVulnerabilityOpenEMR7.0.4

CVE-2026-25746 - SQL Injection Vulnerability in OpenEMR Weakness CWE-89 Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize ...

8.8CVSS6.5AI score0.00768EPSS
SaveExploits2References4
Kitploit
Kitploit
•added 2026/10/15 6:08 p.m.•16 views

OverlayFS-LPE-Exploit

OverlayFS-LPE-Exploit OverlayFS Local Privilege Escalation CVE-2021-3493 Project Overview This repository contains documentation and exploit code for a Local Privilege Escalation LPE vulnerability found in the Ubuntu Linux kernel. This was tested in a TryHackMe lab environment. Lab Highlights...

8.8CVSS7.3AI score0.49166EPSS
SaveExploits30
Kitploit
Kitploit
•added 2026/10/15 6:07 p.m.•21 views

BlockGuard

🛡️ BlockGuard — Process-Based File Access Security Agent BlockGuard is a Windows Data Loss Prevention DLP agent that intercepts and controls file access at the process level. It ensures that only authorized processes — identified by executable path, cryptographic hash, Authenticode signature, and...

6.4AI score
SaveExploits0
EUVD
EUVD
•added 2026/10/15 6:07 p.m.•10 views

EUVD-2026-102239

Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ninja Forms Signature Contract Add-On: from n/a through 3.2.5...

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/15 6:07 p.m.•11 views

CVE-2026-110378

The WordPress Ninja Forms Signature Contract Add-On plugin (versions ≤ 3.2.5 ) is vulnerable to a Broken Access Control issue. This vulnerability is caused by Missing Authorization , specifically allowing for the exploitation of Incorrectly Configured Access Control Security Levels . The impact o...

5.3CVSS5.9AI score0.00228EPSS
SaveExploits0References1
Rows per page
Query Builder